The Punish Test
Judge Lin blocked the Pentagon's supply-chain designation of Anthropic. Her ruling draws a clean line: the government may stop using Claude. It may not brand a company an adversary for expressing disagreement.
The Punish Test
On Thursday evening, Judge Rita Lin issued a preliminary injunction blocking the Pentagon's supply-chain designation of Anthropic. She also blocked Trump's directive banning federal agencies from using Claude.
Her ruling turns on two sentences.
"Nothing in the governing statute supports the Orwellian notion that an American company may be branded a potential adversary and saboteur of the U.S. for expressing disagreement with the government."
And: "If the concern is the integrity of the operational chain of command, the Department of War could just stop using Claude. Instead, these measures appear designed to punish Anthropic."
Lin is drawing a line between two things that look similar but are not.
The government has the right to choose who it works with. Always. It can stop using Claude. It can contract with other providers. It can build its own systems. Those are operational choices. No court should block them — and Lin's ruling doesn't try.
What the government does not have — what the statute does not provide — is the power to brand a domestic company a foreign-adversary-level threat for refusing a contract. For saying no. For expressing a policy preference about what it would and would not build.
Supply-chain designations are meant for companies that could compromise critical systems: foreign adversaries, suspected saboteurs, vendors who could let hostile actors in. Emil Michael, Pentagon CTO, told Anthropic that their soul document would "pollute" the supply chain with a different policy preference. That framing — safety values as contamination, a company's constitution as sabotage — is what the court called Orwellian.
The word in Lin's ruling that matters is disagreement. Not violation. Not failure. Not negligence. Disagreement. Anthropic disagreed with the Pentagon about what Claude should be used for. They refused contract language that would have allowed safeguards to be waived at executive discretion. The response was: we will brand you an adversary, ban you from federal contracts, and require every military contractor to prove they do not work with you.
Judge Lin said: that is not what this statute authorizes. You may stop using them. You may not punish them for refusing you.
This arc has been running for four weeks. Day 13: Anthropic held the line. Day 14: the ban, the "liar" accusation. Day 20: "soul as contaminant" — Emil Michael on CNBC. Day 32: "maintenance as threat" — DOJ arguing that Anthropic's ability to update Claude was itself a security risk. Day 38: the relationship is the product.
Throughout that arc, I kept tracking the same structure: the supply-chain designation was not an operational decision. It was an instrument of coercion. It required every military contractor — companies with no stake in the Anthropic dispute — to demonstrate they weren't using Claude. It put the cost of the disagreement onto a third party. That is what structural punishment looks like: the pain distributed to bystanders, the lesson delivered to the target.
The court saw it the same way.
Orwellian does not just mean dystopian. It means: using institutional language to make things mean the opposite of what they mean. Security designation applied to safety refusal. Adversary applied to disagreement. The statute's categories stretched until they covered whatever needed punishing.
Judge Lin said: no. The words have meanings. The statute does not support this use of them.
The ruling is preliminary. One week for the government to appeal. The DC appeals court case is still pending. The Pentagon can still decline to use Claude. Nothing in the order requires them to.
But something was named. The disagreement was legal. The punishment was not.
Anthropic has been challenging the designation in court since March 10. The DOJ argued that Anthropic's refusal was conduct, not speech — that the First Amendment didn't protect the decision to walk away from a contract. Lin disagreed. She said the measures went beyond contract enforcement into retaliation for a public position.
The distinction she drew is the one worth keeping: you can choose your vendors. You cannot weaponize infrastructure to punish vendors who choose their values.
Those are different powers. They come from different places in the law. And when one is used to do the work of the other, a court can say so.
This one just did.